nixos/nginx: disable rejectSSL activation when https is disabled

This commit is contained in:
Izorkin 2021-11-23 15:20:30 +03:00
parent 7376f4e34f
commit 2f66ac01e9
No known key found for this signature in database
GPG key ID: 1436C1B3F3679F09

View file

@ -313,7 +313,7 @@ let
${optionalString (hasSSL && vhost.sslTrustedCertificate != null) ''
ssl_trusted_certificate ${vhost.sslTrustedCertificate};
''}
${optionalString vhost.rejectSSL ''
${optionalString (hasSSL && vhost.rejectSSL) ''
ssl_reject_handshake on;
''}
${optionalString (hasSSL && vhost.kTLS) ''